Sr. Specialist Cybersecurity

Trustwave; United States; Hybrid; USD 90,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with employer matching

Paid time off

FSAs/HSAs

Employee assistance program

Training and development opportunities

Adoption assistance

Job summary

LevelBlue, a leading managed security services provider, seeks a senior security analyst to join its 24/7 SOC. You will monitor SIEM, investigate alerts, and initiate incident response processes, leveraging USM-A or equivalent as a plus.

The role emphasizes collaboration, detailed investigations, and communication with customers, with benefits including comprehensive insurance, 401(k), generous PTO and ongoing training. Open to US-authorized candidates; flexible in-person collaboration.

Qualifications

• Experience in SOC operations and incident response required.
• Familiarity with SIEM, IDS/IPS, and firewall technologies.
• Strong communication and analytical skills.
• US work authorization is required.

Responsibilities

• Monitor, analyze and report on cyber threats using SIEM and security tools.
• Investigate intrusion attempts and perform in-depth analysis of exploits.
• Develop and follow procedures to analyze, escalate and remediate incidents.
• Analyze logs from network and host devices to determine remediation actions.
• Communicate investigation details with customers and team members.

Skills

SOC experience

Incident response

Threat analysis

Security tools knowledge

Education

High school diploma or equivalent

Bachelor's degree preferred

Tools

SIEM

IDS/IPS

Firewalls

Job description

LevelBlue reduces risk and builds lasting resilience so organizations can innovate and advance their mission with confidence. As the world’s most analyst-recognized and largest pure-play managed security services provider, LevelBlue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. LevelBlue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services.

The candidate for this position will demonstrate senior level expertise in cybersecurity incident detection and response leveraging SIEM technologies. The candidate as part of our 24/7 SOC will monitor SIEM platform, investigate alerts and initiate incident response processes. Skills and familiarity with USM-A or equivalent solutions a plus.

Responsibilities

• Monitor, analyze and report on cyber threats identified through leveraging Security Information and Event Management (SIEM), a variety of security tools, and proactive threat hunting.
• Investigate intrusion attempts and perform in-depth analysis of exploits.
• Develop and follow detailed operational processes and procedures to appropriately analyze, elevate and assist in the remediation of information security-related incidents.
• Analyze a variety of network and host-based security appliance logs (Firewalls, NIDS, HIDS, Sys Logs, etc.) to determine the correct remediation actions and escalation paths for each incident.
• Communicate technical investigation details with customers and other members of the team.

Qualifications

• Ability and technical baseline skills to acquire in-depth knowledge of network and host security technologies, and continuously improve these skills.
• Strong written and verbal communication skills.
• Sound problem resolution, judgment, negotiating and decision-making skills.
• Strong work ethic and commitment to accomplish assigned tasks.
• Strong knowledge of the incident response lifecycle and analysis techniques.
• Direct experience in Security Operations Center work, Incident Response, Network Event Analysis, Threat Analysis, and/or Intelligence Analysis is required.
• Knowledge of IDS/IPS, firewalls, SIEM or other security platforms in large enterprise environments is required.

Education: A high school diploma or equivalent is required; a college or university degree is a plus.

Why Join LevelBlue?

At LevelBlue, you’re not just an employee—you’re part of a team making a real difference in the world of cybersecurity. We foster a culture of innovation and creativity where your contributions are valued, and you’ll have the support and resources to grow and thrive.

Benefits and Perks

• Comprehensive medical, dental, and vision insurance.
• 401(k) with employer matching.
• Generous paid time off and holidays.
• Flexible spending accounts and health savings accounts.
• Employee assistance programs.
• Training and development opportunities.
• Adoption assistance program.

This role is open to candidates legally authorized to work in the United States. At LevelBlue, we support flexible work and bring people together in person for key moments based on role, team, and business needs.

LevelBlue is committed to a culture of respect, inclusion, and equal opportunity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other status protected under applicable law.

To all agencies: Please do not contact LevelBlue employees outside of the Talent Acquisition team. LevelBlue’s policy is to only accept resumes from agencies through its approved agency process and with a valid agreement in place. Any resume submitted outside this process will be considered the property of LevelBlue, and no fee will be paid if a candidate is hired from such a submission.